Q&A: HIPAA-compliant fundraising
Q: A large specialty medical group with a nonprofit research foundation allows the foundation to use its patient database for annual giving campaign mailing. Does this practice violate HIPAA?
A: This is acceptable provided that the medical group informs individuals about this use of their information in their notice of privacy practices and gives them the opportunity to opt out if they do not wish to receive further fundraising communication. In addition, note that covered entities may only use patients’ basic demographic data for fundraising purposes; they may not use any type of clinical information for targeted fundraising.
Editor’s note: Mary Brandt, president of Brandt & Associates, Inc., a healthcare consulting firm in Bellaire, TX answered this question in the January issue of Briefings on HIPAA.
- Antibiotic Overuse a 'Huge Threat' to Patient Safety, Says CDC
- 3 Traits Personality Assessments Can't Reveal
- Consumerism Drives Healthcare Branding, Rebranding Efforts
- CHS Hacked, 4.5M Patient Records Compromised
- PA Ranks See 'Phenomenal Growth,' Lack of Diversity
- Business Roundup: M&A Activity Down Slightly in First Half of 2014
- CFO Exchange: Healthcare Leaders Share 5 Innovative Ideas
- CFO Exchange: Smartphones Poised to Disrupt Healthcare, Says Topol
- Large Employers Trimming Healthcare Spending
- 3 Things the Ice Bucket Challenge Can Teach Hospital Marketers